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Response to Amendment 

This office action is responsive to Applicant's amendment received on September 1, 
2004. Claims 1 and 5-9 have been amended. Claim 2 has been cancelled, and claims 
10-12 have been added. 

Response to Arguments 

Applicant's arguments, see pages 6-7 of Applicant's remarks, filed on September 
1 , 2004, with respect to the rejection(s)of claim(s) 1-9 under 35 U.S.C. 102(b) have 
been fully considered and are persuasive. Therefore, the rejection has been withdrawn. 
However, upon further consideration, a new ground(s) of rejection is made in view of 
Satio et al., (U.S. Publication No. 2001/0044894 and Satio hereinafter) and Curry et al., 
(U.S. Patent No. 6,128,740 and Curry hereinafter). 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AIPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
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directly or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) prior 
to the amendment by the AIPA (pre-AlPA 35 U.S.C. 102(e)). 

Claims 1, 3-9 and 11-12 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Satio et al„ (U.S. Publication No. 2001/0044894 and Satio hereinafter). 

Regarding claims 1 and 3, Satio discloses a certificating system, comprising: 

a registering device registering common certificate information in common with a 
plurality of services (Page 1, Par. 0005-0006); 

a receiving device receiving certificate information of a user when the user 
accesses a particular service of the plurality of services (Pages 5-6, Par. 0050-0056); 

a determining device determining whether the certificate information of the user 
corresponds to the common certificate information, and a permitting device permitting 
the user to utilize the particular service when the certificate information of the user 
corresponds to the common certificate information (Page 6, Par. 0057-0058); 

a storing device storing identification information and password information for 
the particular service, a certifying device certifying the user based on the identification 
information and the password information, and an issuing and/or invalidating device for 
issuing and/or invalidating the common certificate information to the user when said 
certifying device has successfully certified the user (Page 4, Par. 0042-0046). 



Regarding claim 4, Satio discloses further comprising: 
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an available service managing device registering the plurality of services as available 
services with the common certificate information (i.e., The integrated authentication 
server 2 compares an access level of the user with an access level of the application 
server 6 and if access to the application server 6 is permissible, extracts certificates of 
the application server 6 and user concerning the service and confirms the effectiveness 
of the certificates by confirming the latest certificate revocation list)(Page 8, Par. 0084- 
0089). 

Regarding claim 5, Satio discloses a terminal unit, comprising: 

a transmitting device transmitting common certificate information in common 

with a plurality of services when a user accesses a particular service of the plurality of 

services (Page 1, Par. 0007), 

a service utilizing device providing the particular service to the user when the 

user has been successfully certified based on the common certificate information (Page 

4, Par. 0045-0046); 

a storing device storing identification information and password information for 
the particular service, a certifying device certifying the user based on the identification 
information and the password information, and an issuing device for issuing the 
common certificate information to the user when said certifying device has successfully 
certified the user (Page 4, Par. 0042-0046). 
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Regarding claim 6, Satio discloses a computer-readable recording medium on 
which a program for a computer is recorded, said program causing the computer to 
perform: 

a storing device storing identification information and password information for 
the particular service, a certifying device certifying the user based on the identification 
information and the password information, and an issuing device for issuing the 
common certificate information to the user when said certifying device has successfully 
certified the user (Page 4, . Par. 0042-0046); and 

receiving the common certificate information of the user when the user accesses 
the particular service of a plurality of services (Pages 5-6, Par. 0050-0056); 

determining whether or not the certificate information of the user corresponds to 
common certificate information in common with the plurality of services, and permitting 
the user to utilize the particular service when the certificate information of the user 
corresponds to the common certificate information (Page 6, Par. 0057-0058). 

Regarding claim 7, Satio discloses a certifying method, comprising: 
pre-registering common certificate information in common with a plurality of 
services (Page 1 , Par. 0005-0006); 

"* determining whether certificate information of the user corresponds to the 
common certificate information when the user accesses a particular service of the 
plurality of services, and permitting the user to utilize the particular service when the 
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certificate information of the user corresponds to the common certificate information 
(Page 6, Par. 0057-0058); 

a storing device storing identification information and password information for 
the particular service, a certifying device certifying the user based on the identification 
information and the password information, and an issuing device for issuing the 
common certificate information to the user when said certifying device has successfully 
certified the user (Page 4, Par. 0042-0046). 

Regarding claim 8, Satio discloses a certificating system, comprising: 
registering means for registering common certificate information in common with 
a plurality of services (Page 1 , Par. 0005-0006); 

receiving means for receiving certificate information of a user when the user 
accesses a particular service of the plurality of services (Pages 5-6, Par. 0050-0056); 

determining means for determining whether the certificate information of the user 
corresponds to the common certificate information, and permitting means for permitting 
the user to utilize the particular service when the certificate information of the user 
corresponds to the common certificate information (Page 6, Par. 0057-0058); 

a storing device storing identification information and password information for 
the particular service, a certifying device certifying the user based on the identification 
information and the password information, and an issuing device for issuing the 
common certificate information to the user when said certifying device has successfully 
certified the user (Page 4, Par. 0042-0046). 
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Regarding claim 9, Satio discloses a propagation signal for propagating a 
program to a computer, the program causing the computer to perform: 

receiving certificate information of a user when the user accesses a particular 
service of a plurality of services (Pages 5-6, Par. 0050-0056); 

determining whether the certificate information of the user corresponds to 
common certificate information in common with the plurality of services, and permitting 
the user to utilize the particular service when the certificate information of the user 
corresponds to the common certificate information (Page 6, Par. 0057-0058); 

a storing device storing identification information and password information for 
the particular service, a certifying device certifying the user based on the identification 
information and the password information, and an issuing device for issuing the 
common certificate information to the user when said certifying device has successfully 
certified the user (Page 4, Par. 0042-0046). 

Regarding claim 1 1 , Satio discloses an authentication method for accessing a 
plurality of service sewers having respective identification and password information 
using a common certificate information, comprising: 

generating user information management table having the respective 
identification and password information of the plurality of service servers for each user 
(Pages 3-4, Par. 0039-0040); and 
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issuing the common certificate information in relation to each of the plurality of 
service servers upon authenticating the user based on user's input of the respective 
identification and password information of the plurality of service servers, wherein the 
user is subsequently enabled to access each of the plurality of service servers using the 
common certificated information (Page 2, Par 0015-0016). 

Regarding claim 12, Satio discloses a certifying method to allow use of a 
common certificate information with a plurality of services, comprising: 

linking the common certificate information to each of the plurality of services 
upon authentication of a user based on respective password and identification 
information of the plurality of services, and authorizing use of the plurality of services 
based on the common certificate information (Page 2, Par 0015-0016). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claim 10 is rejected under 35 U.S.C. 103(a) as being unpatentable over Satio et 

al., (U.S. Publication No. 2001/0044894 and Satio hereinafter), in view of Curry et al., 

(U.S. Patent No. 6,128,740 and Curry hereinafter). 
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Regarding claim 10, Satio discloses a method for prohibiting use of common 
certificate information with a particular service, comprising: 

receiving certificate information input by a user and determining whether the 
certificate information input by the user corresponds to the common certificate 
information (Pages 5-6, Par. 0050-0056); 

validating use of the particular service using the received common certificate 
upon determining that the certificate information input by the user corresponds to the 
_ common certificate information (Page 6, Par. 0057-0058). 

Satio does not expressly disclose wherein the user is prompted for input upon 
validating the use of a particular service. 

However, Curry discloses wherein users are prompted to indicate whether the 
user wishes to continue after verifying that the expiry period of the certificate is lapsed 
(Col. 5, lines 65-67 and Col. 6, lines 1-24). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of applicant's invention to modify the security management method of Satio by 
including wherein the user is prompted for input upon validating the use of a particular 
service as disclosed by Curry. This modification would have been obvious because one 
of ordinary skill in the art would have been motivated by the suggestion of Curry to 
provide an improved solution for the problem of non-detection of revoked certificates 
(Curry, Col. 2, lines 4-50). 
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Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Arezoo Sherkat whose telephone number is (571) 272- 
3796. The examiner can normally be reached on 8:00-4:30 Monday-Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571 ) 272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 





Arezoo Sherkat 
Patent Examiner 
Group 2131 
Feb. 22, 2005 



